CVE-2020-8251

7.5

HIGHCVSS v3

Published

September 18, 2020

CVSS v2

5 MEDIUM

Affected

14 projects

Assigned by

[email protected]

Severity scale

010

Description

Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections.

@externs/nodejs

NPMThe Closure Compiler Externs For Node.JS.

>= 14.0.0, < 14.11.0NVD

externs/nodejs

GitHubThe Externs For Node.JS.

>= 14.0.0, < 14.11.0NVD

@depack/nodejs

NPM

More on this CVE

NVD↗GitHub Advisory↗

Mocks Of Built-In Node.JS Modules To Use For Compilation.

>= 14.0.0, < 14.11.0NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

>= 14.0.0, < 14.11.0NVD

dpck/nodejs

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

>= 14.0.0, < 14.11.0NVD

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

>= 14.0.0, < 14.11.0NVD

nodejs

NPM

>= 14.0.0, < 14.11.0NVD

node.js

NPMsecurity holding package

>= 14.0.0, < 14.11.0NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 14.0.0, < 14.11.0NVD